Mechrevo Control Console Uncontrolled Search Path Vulnerability in GCUService Component

A critical vulnerability exists in Mechrevo Control Console version 1.0.2.70, specifically within the GCUService component. The issue arises from an unknown functionality in the library 'csCAPI.dll', located in 'C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\'. This vulnerability allows for an uncontrolled search path, which could potentially be exploited locally. However, the complexity of the attack is high, making exploitation difficult.

Impact

Exploitation of this vulnerability could lead to unauthorized manipulation of the search path, potentially allowing for the execution of malicious code or interference with the application's normal operation.